614 matches found
IBM solidDB <= 6.5.0.3 - Denial of Service Vulnerability
No description provided by source. Source: http://aluigi.org/adv/soliddb1-adv.txt Luigi Auriemma Application: IBM solidDB http://www-01.ibm.com/software/data/soliddb/ Versions: = 6.5.0.3 Platforms: AIX, Linux, Solaris, Windows Bug: Denial of Service Exploitation: remote, versus server Date: 15 Oc...
DEBIAN-CVE-2013-4356
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service crash...
RHEL 5 : glibc (RHSA-2013:0769)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0769 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the Name Serv...
DEBIAN-CVE-2013-1788
poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3 poppler/Stream.cc...
Code injection
poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3 poppler/Stream.cc...
CVE-2013-1788
poppler before 0.22.1 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in 1 splash/Splash.cc, 2 poppler/Function.cc, and 3 poppler/Stream.cc...
IBM solidDB 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities
The remote database system is affected by multiple denial of service vulnerabilities : - Sending packets with many integer fields can trigger several recursive calls of a certain function causing an excessive amount of stack memory consumption. CVE-2010-4055, IC80074 - Upon receiving a packet...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 10.0.648.127. Such versions are reportedly affected by multiple vulnerabilities : - It may be possible to navigate or close the top location in a sandboxed frame. Issue 42574, 42765 - A cross-origin error message leak exist...
Google Chrome < 10.0.648.127 Multiple Vulnerabilities
Binary data 5812.pasl...
Debian Security Advisory DSA 2162-1 (openssl)
The remote host is missing an update to openssl announced via advisory DSA 2162-1. OpenVAS Vulnerability Test $Id: deb21621.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2162-1 openssl Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
[SECURITY] [DSA 2162-1] openssl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2162-1 [email protected] http://www.debian.org/security/ Nico Golde February 14, 2011 http://www.debian.org/security/faq -...
CVE-2010-4057
solid.exe in IBM solidDB 6.5.0.3 and earlier does not properly perform a recursive call to a certain function upon receiving packet data containing many integer fields with two different values, which allows remote attackers to cause a denial of service invalid memory access and daemon crash via ...
IBM solidDB 6.5.0.3 - Denial of Service
IBM solidDB 6.5.0.3 - Denial of Service Source: http://aluigi.org/adv/soliddb1-adv.txt Luigi Auriemma Application: IBM solidDB http://www-01.ibm.com/software/data/soliddb/ Versions: = 6.5.0.3 Platforms: AIX, Linux, Solaris, Windows Bug: Denial of Service Exploitation: remote, versus server Date: ...
Internet Explorer Uninitialized Memory Corruption Vulnerability - CVE-2010-3331
Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Internet Explorer Uninitialized Memory Corruption Vulnerability...
Mozilla Firefox ConstructFrame With Floating First-letter Memory Corruption (CVE-2009-2462)
Mozilla Firefox is a web browser developed by Mozilla Foundation. The browser is capable of interpreting and rendering many types of content published on the Internet, including various versions of HTML, XML, XUL, JavaScript, various graphics formats, and so on. The browser runs on the Windows,...
Memory corruption
The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 aka JPX header, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly...
OpenSSL: Denial of service
Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description The ASN1STRINGprintex function does not properly check the provided length of a BMPString or...
Authentication flaw
The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...
CVE-2009-0590
The ASN1STRINGprintex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service invalid memory access and application crash via vectors that trigger printing of a 1 BMPString or 2 UniversalString with an invalid encoded length...
CVE-2009-0590
OpenSSL vulnerability CVE-2009-0590 affects the ASN1_STRING_print_ex path for BMPString/UniversalString lengths, enabling a remote attacker to trigger invalid memory access and crash the application (DoS). The issue is present in OpenSSL builds prior to 0.9.8k. Public advisories and security bull...